According to the ISO 9001 standard, which one of the following is a defined responsibility of top management?
Which type of audit risk is the risk that a significant defect may occur in the QMS, although the organization has internal control mechanisms in place?
Scenario 2:
Bell is a Canadian food manufacturing company that operates globally. Their main products include nuts, dried fruits, and confections. Bell has always prioritized product quality and has maintained a good reputation for many years. However, the company's production error rate increased significantly, leading to more customer complaints.
To increase efficiency and customer satisfaction, Bell implemented a Quality Management System (QMS) based on ISO 9001. The top management established a QMS implementation team comprising five middle managers from various departments, including Leslie, the quality manager.
Leslie was responsible for assigning responsibilities and authorities for QMS-related roles. He also suggested including a top management representative in the QMS team, but top management declined due to other priorities.
The team defined the QMS scope as:
"The scope of the QMS includes all activities related to food processing."
Leslie established a quality policy and presented it to the team for review before top management approval. Top management also proposed a new strategy for handling customer complaints, requiring biweekly customer surveys to monitor customer perceptions.
In scenario 2, the team determined the QMS scope by taking into account only the requirements of top management. Is this compliant with ISO 9001?
Which two of the following should be included in an audit plan?